How to fix How to fix 'HASH mismatch' error with pip in Python

PythonINTERMEDIATEMEDIUM

pip verified the downloaded package file and found it doesn't match the expected hash. This indicates corruption, tampering, or incorrect requirements specification.

What this error means

When pip installs from a requirements file with --require-hashes, it verifies that each downloaded package matches the specified hash values. If the actual file hash doesn't match the expected hash, pip rejects the package to prevent installing corrupted or modified files.

Typical symptoms

pip install fails with 'HASH mismatch'
Error includes expected vs actual hash values
Works without --require-hashes flag
Downloaded file is corrupted
Network issue during download resulted in partial/bad file
Wrong hash value in requirements file
Specific package version fails hash check

Common causes

Incorrect hash in requirements.txt
Downloaded package file corrupted during transfer
Network interruption during download
Malicious man-in-the-middle modifying package
Pip cache contains corrupted version of package
PyPI or mirror serving incorrect package
Hash algorithm mismatch (sha256 vs md5)

How to fix this error

1Verify the root cause

Review the error message above and identify which cause applies to your situation. Run additional diagnostics if needed.

2Apply the appropriate fix

Follow the corresponding solution from the causes section above.

3Retry the installation

Once you've addressed the root cause, try running 'pip install' again.

Related errors

Official resources & further reading

📚Python Official Documentation
📖
pip: Hash checking mode(Official Docs)
💬
SO: pip HASH mismatch(Stack Overflow)
🐙
GitHub: pip issues(GitHub)